Which option in a firewall rule would only match and allow traffic to VPN gateways for oneCommunity in common?
Answer(s): C
Specific VPN Communities is the option that would only match and allow traffic to VPN gateways for one Community in common. This option allows you to define a specific VPN community that includes the VPN gateways that are allowed to communicate with each other. The other options are either too broad or too narrow for this scenario.
[Site to Site VPN in R80.x - Tutorial for Beginners]
Which SmartConsole tab is used to monitor network and security performance?
Answer(s): D
Logs & Monitor is the SmartConsole tab that is used to monitor network and security performance. This tab allows you to view and analyze logs and events from various sources, such as Security Gateways, Security Management Servers, and SmartEvent Servers. You can also use this tab to generate reports and troubleshoot issues.
[Logging and Monitoring Administration Guide R80.20]
Which of the following is NOT a policy type available for each policy package?
Answer(s): A
Threat Emulation is not a policy type available for each policy package. Threat Emulation is a software blade that is part of the Threat Prevention policy type. The other options are valid policy types that can be configured for each policy package. [Threat Prevention Administration Guide R80.40], [Security Policies Administration Guide R80.40]
An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?
Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS. This is because certificate based authentication provides stronger security and easier management than pre-shared secret authentication. The other options are either incorrect or irrelevant for this scenario.
[Check Point R80.10 - Part 6 - Certificate Based Authentication]
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
Answer(s): B
The INSPECT Engine is a technology that extracts detailed information from packets and stores that information in state tables. It enables stateful inspection and application layer filtering12
INSPECT Engine, Stateful Inspection
Post your Comments and Discuss Checkpoint 156-215.81 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 156-215.81 content, but please register or login to continue.